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- Tho MAILING DATE of this communication appears on the cover sheet with the correspondence address — 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH{S) OR THIRTY (30) DAYS, 
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2a)\3 This action is FINAL. 2b)l3 This action is non-final. 
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DETAILED ACTION 



Information Disclosure Statement 

1 . The information disclosure statement (IDS) submitted on September 20, is in 
compliance with the provisions of 37 CFR 1 .97. Accordingly, the examiner is 
considering the information disclosure statement. 



Claim Rejections - 35 USC § 101 

2. 35 U.S.C. 1 01 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

3. Claims 1-15 are rejected under 35 U.S.C, 101 because the claimed invention is 
directed to non-statutory subject matter. The claims currently recite of software alone 
and of itself that is not tangibly embodied. 



Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 1-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over 



Apperson et al, U.S. Patent 5,978,484 in view of Atkinson et al, U.S. Patent 5,892,904. 
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As per claim 1 , Apperson et al discloses of a core product load manifest for 
protecting ongoing system integrity of a software product having a plurality of pieces. 
The core product load manifest includes header attributes of the software product. A list 
including a plurality of manifest items that identify a corresponding piece of the software 
product, each manifest item includes an attribute. The file is signed with a digital 
signature that includes the attributes, each of the plurality of items, and the item 
attribute that is included (col. 2, lines 40-53; col. 6, lines 43-48; and col. 13, lines 1-4). 
The teachings of Apperson et al are silent in disclosing of the usage of a header 
comprising information, or attributes, about the software product. In a related teaching, 
Atkinson et al discloses of a header that includes identifying information about a file 
such as characteristics of the file (col. 1 1 , lines 37-42 and col. 12, lines 4-5 & 33-35). It 
would have been obvious to a person of ordinary skill in the art at the time of the 
invention to have been motivated to include identifying information about a file in the 
header. Atkinson et al recites of motivational benefits similar to Apperson et al in that 
signing of an executable file ensures the authenticity and integrity of the executable file 
to that is can be transmitted with confidence to a recipient (col. 2, lines 33-40). It is 
obvious that teachings of Apperson et al would have been able to be modified to 
incorporate the usage of a header comprising attribute information about a file so that it 
can aid in the authenticity and integrity process of a transmitted file as is taught by 
Atkinson et al. 
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As per claim 2, it is taught by Apperson et al of an attribute item including a 
predefined attribute identifying the corresponding piece of software product as being 
signed (col. 2, lines 44-47). 

As per claim 3, Apperson et al teaches of a digital signature of the signed piece 
of software product is stored with the signed corresponding piece of and the signature is 
excluded from the manifest item identifying the signed corresponding piece of software 
product (col. 2, lines 47-54; col. 3, lines 9-14; and col. 6, lines 43-48). 

As per claim 4, it is disclosed by Apperson et al that the signature of each signed 
corresponding piece of the software product and the manifest digital signature includes 
a single certificate (col. 2, lines 44-50 and col. 6, lines 43-48). 

As per claim 5, the teachings of Apperson et al disclose a mechanism that allows 
for servers to download code with the client being able to validate their origin and 
authenticity (col. 2, lines 35-38) and it is interpreted by the examiner that an amended 
manifest is generated for identifying added and deleted pieces of the software product 
as any changes occur to the code so that they can be indicated to the client in order to 
maintain the origin and authenticity of the modified code. 

As per claim 6, Apperson et al recites of chaining the core product manifest (col. 
8, line 65 through col. 9, line 4). 

As per claims 7 and 16, it is disclosed by Apperson et al of a method and 
computer program product including computer executable instructions stored on a 
computer readable medium for protecting ongoing system integrity of a software product 
having a plurality of pieces. A product load manifest is created for the software product 
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and it includes attributes of the software product, a list of a plurality of manifest items. 
Each manifest item includes an attribute identifying the corresponding piece of software 
product as being signed and includes the digital signature, each of the plurality of items, 
and each of the item attribute included in the digital signature (col. 2, lines 40-53). The 
teachings of Apperson et al are silent in disclosing of the usage of a header comprising 
information, or attributes, about the software product. In a related teaching, Atkinson et 
al discloses of a header that includes identifying information about a file such as 
characteristics of the file (col. 1 1 , lines 37-42 and col. 12, lines 4-5 & 33-35). It would 
have been obvious to a person of ordinary skill in the art at the time of the invention to 
have been motivated to include identifying information about a file in the header. 
Atkinson et al recites of motivational benefits similar to Apperson et al in that signing of 
an executable file ensures the authenticity and integrity of the executable file to that is 
can be transmitted with confidence to a recipient (col. 2, lines 33-40; col. 6, lines 43-48; 
col. 10, lines 28-29; and col. 13, lines 1-4). It is obvious that teachings of Apperson et al 
would have been able to be modified to incorporate the usage of a header comprising 
attribute information about a file so that it can aid in the authenticity and integrity 
process of a transmitted file as is taught by Atkinson et al. 

As per claims 8 and 19, Apperson et al discloses of creating the product load 
manifest for the software product includes receiving a certificate and copying the 
certificate in the file (col, 2, lines 47-54). The teachings of Atkinson et al are relied upon 
for the use of a header comprising information about the file, please refer above to the 
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motivational benefit of a header comprising file information as is taught by Atkinson et 
al. 

As per claims 9 and 20, it is taught by Apperson et al of computing a digital 
signature of each signed piece of the software product includes utilizing the certificate 
and private key for computing the digital signature of each signed piece of the software 
product (col. 2, lines 47-54; col. 6, lines 43-48; and col. 8, lines 17-25). 

As per claims 10 and 17, the teachings of Apperson et al disclose a mechanism 
that allows for servers to download code with the client being able to validate their origin 
and authenticity (col. 2, lines 35-38) and it is interpreted by the examiner that an 
amended manifest is generated for identifying added and deleted pieces of the software 
product as any changes occur to the code so that they can be indicated to the client in 
order to maintain the origin and authenticity of the modified code. 

As per claim 1 1 , Apperson et al recites of chaining the core product manifest (col. 
8, line 65 through col. 9, line 4). 

As per claims 12-14 and 18, the teachings of Apperson et al disclose a 
mechanism that allows for servers to download code with the client being able to 
validate their origin and authenticity and chaining the core product manifest (col. 2, lines 
35-38 and col. 8, line 65 through col. 9, line 4) and it is interpreted by the examiner that 
an amended manifest is generated for identifying added and deleted pieces of the 
software product as any changes occur to the code so that they can be indicated to the 
client in order to maintain the origin and authenticity of the modified code. The 
teachings of Atkinson et al are relied upon for the use of a header comprising 



Application/Control Number: 09/957,421 Page 7 

Art Unit: 2131 

information about the file, please refer above to the motivational benefit of a header 
comprising file information as is taught by Atkinson et al wherein Atkinson et al further 
recites of a link, or pointer to additional information included within the header (col. 6. 
lines 6-27). 

As per claim 15, Apperson et al teaches of creating the product load manifest for 
the software product includes a pattern attribute of the software product (col. 2, lines 44- 
47). The teachings of Atkinson et al are relied upon for the use of a header comprising 
information about the file, please refer above to the motivational benefit of a header 
comprising file information as is taught by Atkinson et al 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Christopher A. Revak whose telephone number is 571- 
272-3794. The examiner can normally be reached on Monday-Friday, 6:30am-3:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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